Spoofing, Layering and Cross-Market Trades: The Orders Disappear, the Advantage Stays

Spoofing, layering and cross-market trades can manipulate prices by creating false trading signals or moving one instrument to benefit a position in another. The orders other traders see can serve a different purpose from the trades the firm actually wants filled. If you work on a trading desk, in surveillance or on the systems behind the orders, you may know why an order was entered, what triggered its cancellation and where the benefit appeared.

This page follows the order sequence, the linked trade and the people controlling them. Our broader discussion of securities fraud evidence connects trading records with the other business records a whistleblower may understand. Here, the central question is specific: what was the order meant to make someone else do?

Avalon’s Layering Orders Changed Other Traders’ Prices

Avalon FA Ltd. used orders and cancellations to trick other participants into buying or selling stocks at artificial prices. In its account of the jury’s verdict, the Securities and Exchange Commission described layering and cross-market manipulation as separate schemes. The jury found the trading firm and its owner and undisclosed controlling participant liable for securities-law violations.

The layering mechanism put the deception into the orders themselves. According to the Commission’s trial account, Avalon placed and canceled orders to influence other people’s stock trades. We see the trick in what other traders paid. An order could do its job without ever becoming a trade.

An insider who understands the trading system can explain how the orders that disappeared related to the transactions Avalon sought to influence. We compare the timing of those orders with the executions and the instructions behind them.

Cross-Market Manipulation Moved Stocks to Affect Options

Avalon’s cross-market scheme used purchases and sales of stocks to artificially affect options prices. The Securities and Exchange Commission reported that the two schemes generated more than $25 million in illicit profit for Avalon. The firm’s civil penalty was $7.5 million.

For an insider working across linked instruments, the useful explanation connects the stock activity to the options activity. We examine both alongside the communications explaining their relationship.

The Undisclosed Controller Was Inside the Brokerage

The Commission’s account also connects ownership to market access. Avalon had a named owner, while another participant kept his controlling interest undisclosed and worked as a registered representative at Lek Securities, the New York brokerage, to facilitate Avalon’s trading. The person helping the customer trade also had a concealed interest in that customer.

Lek Securities and its chief executive settled with the Securities and Exchange Commission and admitted that the trading occurred and was manipulative. An insider’s knowledge of who controlled the customer and who facilitated its trades can connect the account records to decisions inside the brokerage.

What Evidence Shows Spoofing, Layering and Cross-Market Manipulation?

For spoofing, layering and cross-market manipulation, useful whistleblower evidence connects the order’s timing and cancellation to the intended trade, the account’s controller and the instructions behind the activity. Order timestamps, code versions, parameter changes and communications let us examine that connection with someone who understands the system. Prices and volumes describe the market’s response, while those internal records help explain the decisions that produced it.

A timestamp can place an order before the execution it was meant to influence. A cancellation record can place its removal afterward. We compare those events with the trader’s communications and, where software generated the activity, the code and settings in use at the time. The comparison asks what the trader or system was trying to accomplish when it entered the order.

Account relationships make that reconstruction more useful. In Avalon, the Commission identified an undisclosed controller working inside the brokerage that facilitated the trading. We connect the account’s authority and instructions with the orders it entered and the linked positions it sought to benefit.

Surveillance records add another part of the story: what the firm recognized and how it responded. Warnings, escalation records and the settings governing a trading system can be compared with the activity they addressed. The TD Securities action shows why that response deserves its own attention.

TD Securities Faced Warnings About Its Treasury Trading

The Securities and Exchange Commission alleged that the head of TD Securities’ U.S. Treasuries desk entered orders he had no intention of executing to obtain better prices for genuine orders on the opposite side of the market. Its September 2024 announcement concerned the U.S. Treasury cash securities market. According to the agency’s account of its order, the genuine orders filled and produced profits for TD Securities, after which the trader allegedly canceled the other orders.

The Commission’s order also found that the firm lacked adequate controls and failed to take reasonable steps to scrutinize the trader after warnings about potentially irregular trading. TD Securities consented to an order finding an antifraud violation and a failure to reasonably supervise him. The order required $400,000 in repayment of trading gains alongside a $6.5 million civil penalty.

For a surveillance or compliance insider, the warnings connect the trading pattern to the firm’s response. We would examine what activity the warning identified, who received it and what scrutiny followed. That is where someone inside the firm can explain what became of a concern already raised.

Who Investigates Spoofing, Layering and Cross-Market Trades?

The Securities and Exchange Commission investigates stock market manipulation, including the layering and cross-market schemes at Avalon. Its actions here reached stocks and options at Avalon and Treasury cash securities at TD Securities.

Avalon involved findings about deceptive trading and responsibility for others’ violations through control. TD Securities involved an antifraud violation alongside a supervisory failure. For someone who knows both the trading and the controls, we examine which decisions the evidence actually connects to each role.

Our discussion of the authorities handling securities and commodities reports covers the wider reporting questions. We assess the instrument, the activity and the relevant whistleblower program with you.

What the Trading Insider Can Bring to a Whistleblower Case

Knowing why the code behaved as it did, who controlled an account or what happened to a surveillance warning can connect the trading history to the decisions behind it. If working with those orders was your job, you may understand how the canceled orders served the position that benefited.

Under the SEC whistleblower award program, eligible whistleblowers can share 10% to 30% of qualifying monetary sanctions collected, where the qualifying SEC action exceeds $1 million in monetary sanctions. We build the securities whistleblower case around that information and pursue the award opportunity with you.

A separate whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. For trading misconduct, we shape your securities fraud report around what you know and the Securities and Exchange Commission’s award program.

When You Know What the Orders Were For

If you can explain the canceled orders, the linked position or the warning that went unanswered, speak to our whistleblower experts about what the orders were for. We stay beside you through the process, building your strongest securities whistleblower case and bringing in securities fraud whistleblower lawyers who know trading manipulation. Your knowledge of the desk belongs at the center of that work.